RHBA-2011:1687 - Bug Fix Advisory

Topic

Updated cyrus-sasl packages that fix two bugs and add one enhancement are now
available for Red Hat Enterprise Linux 6.

Description

The cyrus-sasl packages contain the Cyrus implementation of the Simple
Authentication and Security Layer (SASL), a method for adding authentication
support to connection-based protocols.

These updated packages fix the following bugs:

• Prior to this update, the ntlm plug-in did not work due to a code error. This

update modifies the source code so that the plug-in now works as expected.
(BZ#720451)

• Prior to this update, creating the user ID and the group ID of the saslauth

daemon caused conflicts. This update corrects this behavior and now the saslauth
daemon works as expected. (BZ#730242)

• Prior to this update, cyrus-sasl displayed redundant warnings during the

compilation. With this update, cyrus-sasl has been modified and now works as
expected. (BZ#730246)

This update also adds the following enhancement:

• This update adds support of partial Relocation Read-Only (RELRO) for the

cyrus-sasl libraries. (BZ#727274)

All users of cyrus-sasl are advised to upgrade to these updated packages, which
fix these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 727274 - Request to recompile libraries with -Wl,-z,relro flags
• BZ - 730242 - cyrus sasl doesn't create uid/gid according to the setup package
• BZ - 730246 - cyrus-sasl shows testsuite regressions in RPMdiff

CVEs

(none)

References

(none)